apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: authentik-media
  namespace: auth-system
spec:
  accessModes:
    - ReadWriteMany  # RWX needed for server + worker pods
  storageClassName: longhorn
  resources:
    requests:
      storage: 2Gi